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AMENDMENTS TO THE CLAIMS 
1 - (ouirmtly amended) A method for produdng forgery-proof docunieots or data records using a 
security module, 

• whereby the security module generates a secret which Trains unknown to a 
document producer and the document producer can not gain access to the secret which 
can only be encrypted by an auflientication unit, 

whereby the secret, together with information that reveals details about the 
identity of the security module^ is transferred in encrypted form to an authentication unit, 

• whereby the authentication imit decrypts the secret, recognizes the identity of the 
security module and encrypts the secret, together with infbnnation on the identity of the 
document producer, in such a way that only a checking unit can carry out a decryption 
and then the authentication umt transmits these to the docum^t producer, 

• whereby the document producer transfers its own data to the security module, 

• whereby the security module iiieversibly links by hash cocryption the secret with 
the data that the document producer itself has introduced, and 

• \^ereby it is not possible to draw conclusions about the secret, 
characterized in that the output valxie of the combination machine is used to forni an 
irreversible hash and that hash value is output from flie outlet valve, the result of the 
irreversible linking of the secret wifli the data mtroduced by Ihe document producer, the 
data introduced by the document producer itself as well as the encrypted infoimation of 
the authentication utut all serve to form the document that is transmitted to the checking 
unit. 

2. (Original) The method according to Claim 1 , characterized in thai the additional 
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information transferred by the authentication unit contains details on the identity of the 
document producer and on tiie period of validity of the documents generated by the 
document producer. 

3. (currently amended) The method for checking the autiienticity of a document, characterized 

in that the checking unit checks whether the result of an irreversible linking by hash 
encryption of a secret with data introduced by a document producer have been 
incoiporat^ into the document, in thatt the checking unit decrypts the secret and 
additional information that were encrypted by an authentication unit, in that the checking 
unit iiieversibly links the decrypted secret with the data introduced into the document by 
the document producer, in the same manner as a security module used to produce the 
forgery-proof document, and in that the checking unit compares the result of the 
irreversible linking that it has perfomied itself with the result of an irreversible linking 
that was performed by the document producer and incorporated into the documen t, and 
the output value of the combination machine is used to form an iireveisible hash and that 
hash vahie is output from the outlet valve. 

4. (Original) The method according to Claim 3, characterized in that tibie comparison 

determines whefhw data introduced into the document by the document producer has 
been forged. 
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